USB Forensics — Recover More Volume Serial Numbers with the Windows 10 Partition/Diagnostic Event Log
Posted by Peter HeinickeTue, Mar 29, 2022 @ 08:05 AM
less than 1 minute to read
Windows 10 introduced an event log of high value to digital forensic examiners and incident responders — especially when device attribution is required. Written for a technical audience, this blog shares the results of an analysis showing what can be stored in the log. Read the blog to gain insight into methodology, results and their relevance.